CVE-2024-27181
published 2024-08-02CVE-2024-27181: In Apache Linkis <= 1.5.0, Privilege Escalation in Basic management services where the attacking user is a trusted account allows access to Linkis's Token…
PriorityP354high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.66%
47.7th percentile
In Apache Linkis <= 1.5.0,
Privilege Escalation in Basic management services where the attacking user is
a trusted account
allows access to Linkis's Token information. Users are advised to upgrade to version 1.6.0, which fixes this issue.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | linkis | < 1.6.0 | 1.6.0 |
| apache_software_foundation | apache_linkis_basic_management_services | >= 1.3.2 < 1.6.0 | 1.6.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Apache Linkis vulnerable to privilege escalation
ghsa·2024-08-02
CVE-2024-27181 [HIGH] CWE-269 Apache Linkis vulnerable to privilege escalation
Apache Linkis vulnerable to privilege escalation
In Apache Linkis <= 1.5.0, Privilege Escalation in Basic management services where the attacking user is a trusted account allows access to Linkis's Token information. Users are advised to upgrade to version 1.6.0, which fixes this issue.
OSV
Apache Linkis vulnerable to privilege escalation
osv·2024-08-02
CVE-2024-27181 [HIGH] Apache Linkis vulnerable to privilege escalation
Apache Linkis vulnerable to privilege escalation
In Apache Linkis <= 1.5.0, Privilege Escalation in Basic management services where the attacking user is a trusted account allows access to Linkis's Token information. Users are advised to upgrade to version 1.6.0, which fixes this issue.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-08-02
Published